CVE-2021-29488
Creation of files outside the Download Folder through malicious PAR2 files
SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer() function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. A patch was released as part of SABnzbd 3.2.1RC1. As a workaround, limit downloads to NZBs without PAR2 files, deny write permissions to the SABnzbd process outside areas it must access to perform its job, or update to a fixed version.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Creation of files outside the Download Folder through malicious PAR2 files
SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer() function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. A patch was released as part of SABnzbd 3.2.1RC1. As a workaround, limit downloads to NZBs without PAR2 files, deny write permissions to the SABnzbd process outside areas it must access to perform its job, or update to a fixed version.
- Record
CVE-2021-29488- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-23
- Updated
- 2026-11-02
EUVDEUVD-2021-16087
SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer() function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. A patch was released as part of SABnzbd 3.2.1RC1. As a workaround, limit downloads to NZBs without PAR2 files, deny write permissions to the SABnzbd process outside areas it must access to perform its job, or update to a fixed version.
- Record
EUVD-2021-16087- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-03
NVD
SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer() function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. A patch was released as part of SABnzbd 3.2.1RC1. As a workaround, limit downloads to NZBs without PAR2 files, deny write permissions to the SABnzbd process outside areas it must access to perform its job, or update to a fixed version.
- Record
CVE-2021-29488- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-23
- Updated
- 2026-11-02
OSV
SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer() function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. A patch was released as part of SABnzbd 3.2.1RC1. As a workaround, limit downloads to NZBs without PAR2 files, deny write permissions to the SABnzbd process outside areas it must access to perform its job, or update to a fixed version.
- Record
CVE-2021-29488- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-29488
SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer() function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. A patch was released as part of SABnzbd 3.2.1RC1. As a workaround, limit downloads to NZBs without PAR2 files, deny write permissions to the SABnzbd process outside areas it must access to perform its job, or update to a fixed version.
- Record
DEBIAN-CVE-2021-29488- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-29488
SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer() function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. A patch was released as part of SABnzbd 3.2.1RC1. As a workaround, limit downloads to NZBs without PAR2 files, deny write permissions to the SABnzbd process outside areas it must access to perform its job, or update to a fixed version.
- Record
UBUNTU-CVE-2021-29488- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sabnzbdplusDebian:12 |
before 3.2.1+dfsg-1, plus listed versions 0.4.11-10.4.12-10.4.9-10.5.0-10.5.0-2 Show 38 moreShow less0.5.2-10.5.3-10.5.4-10.5.5-10.5.6-10.6.10-10.6.14-10.6.15-10.6.2-10.6.4-10.6.6-10.6.7-10.6.8-10.6.9-10.7.11-10.7.13-10.7.16-10.7.18-10.7.2-10.7.20+dfsg-10.7.20-10.7.3-10.7.4-10.7.5-10.7.6-10.7.8-10.7.9-11.0.2+dfsg-11.0.3+dfsg-11.0.3+dfsg-21.1.1+dfsg-12.3.1+dfsg-12.3.2+dfsg-12.3.4+dfsg-12.3.6+dfsg-13.0.0~0git20200408+dfsg-13.1.1+dfsg-13.1.1+dfsg-2 |
3.2.1+dfsg-1 |
sabnzbdplusDebian:13 |
before 3.2.1+dfsg-1, plus listed versions 0.4.11-10.4.12-10.4.9-10.5.0-10.5.0-2 Show 38 moreShow less0.5.2-10.5.3-10.5.4-10.5.5-10.5.6-10.6.10-10.6.14-10.6.15-10.6.2-10.6.4-10.6.6-10.6.7-10.6.8-10.6.9-10.7.11-10.7.13-10.7.16-10.7.18-10.7.2-10.7.20+dfsg-10.7.20-10.7.3-10.7.4-10.7.5-10.7.6-10.7.8-10.7.9-11.0.2+dfsg-11.0.3+dfsg-11.0.3+dfsg-21.1.1+dfsg-12.3.1+dfsg-12.3.2+dfsg-12.3.4+dfsg-12.3.6+dfsg-13.0.0~0git20200408+dfsg-13.1.1+dfsg-13.1.1+dfsg-2 |
3.2.1+dfsg-1 |
sabnzbdplusDebian:14 |
before 3.2.1+dfsg-1, plus listed versions 0.4.11-10.4.12-10.4.9-10.5.0-10.5.0-2 Show 38 moreShow less0.5.2-10.5.3-10.5.4-10.5.5-10.5.6-10.6.10-10.6.14-10.6.15-10.6.2-10.6.4-10.6.6-10.6.7-10.6.8-10.6.9-10.7.11-10.7.13-10.7.16-10.7.18-10.7.2-10.7.20+dfsg-10.7.20-10.7.3-10.7.4-10.7.5-10.7.6-10.7.8-10.7.9-11.0.2+dfsg-11.0.3+dfsg-11.0.3+dfsg-21.1.1+dfsg-12.3.1+dfsg-12.3.2+dfsg-12.3.4+dfsg-12.3.6+dfsg-13.0.0~0git20200408+dfsg-13.1.1+dfsg-13.1.1+dfsg-2 |
3.2.1+dfsg-1 |
sabnzbdplusUbuntu:16.04:LTS |
All versions, plus listed versions 0.7.20-10.7.20+dfsg-1 |
None known |
sabnzbdplusUbuntu:18.04:LTS |
All versions, plus listed versions 1.1.1+dfsg-12.3.1+dfsg-12.3.2+dfsg-1 |
None known |
sabnzbdplusUbuntu:20.04:LTS |
All versions, plus listed versions 2.3.6+dfsg-12.3.6+dfsg-1build12.3.6+dfsg-1ubuntu13.0.0~0git20200408+dfsg-1 |
None known |
sabnzbdplusUbuntu:22.04:LTS |
All versions, plus listed versions 3.2.1+dfsg-13.4.2+dfsg-13.4.2+dfsg-23.5.0+dfsg-13.5.0+dfsg-23.5.1+dfsg-1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-29488 is a medium vulnerability (CVSS 4.3) in Sabnzbd, published May 7, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.89%, the 59th percentile. Fixed in sabnzbdplus 3.2.1+dfsg-1.